Displaying 20 results from an estimated 10000 matches similar to: "puppet files denied by SELinux"
2015 Jun 29
1
puppet files denied by SELinux
I have no idea of the current dependency problem. I think your original
problem was caused by mv'ing files from an nfs share to /etc which
maintained the context. And SELinux prevented puppet from accessing
nfs_t type. If you had just run restorecon on the object it would have
set it back to the correct/default context.
You might want to setup an alias mv "mv -Z"
This changes
2015 Jun 20
2
puppet files denied by SELinux
Hey folks,
Ok so I'm having another issue with SELinux. However I think I'm pretty
close to a solution and just need a nudge in the right directtion.
I wrote a puppet module that gets systems into bacula backups. Part of the
formula is to distribute key/cert pairs with permissions that allow bacula
to read them so that bacula can talk to the host over TLS. It's pretty
slick, I must
2015 Jun 21
0
puppet files denied by SELinux
Hey guys,
Quick update. I grepped through the output of getsebool -a to see that
related to puppet. And I found this setting: puppetagent_manage_all_files.
So I tried running this command: setsebool -P puppetagent_manage_all_files
0
And did a restorecon on my modules directory: restorecon -R -v
environments/production/moudles
So there's good news and bad news to report! It seems that
2015 Jun 17
2
selinux allow apache log access
>
> That's because there's already a zabbix module loaded (the message isn't
> very informative!). I forgot that the received wisdom is to insert "my" in
> front of ones own modules i.e.:
> grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix
> semodule -i myzabbix.pp
Hmm no luck there either:
[root at monitor2:~] #semodule -i myzabbix.pp
2015 Jun 17
1
selinux allow apache log access
On 06/17/2015 04:03 PM, Jonathan Billings wrote:
> On Wed, Jun 17, 2015 at 03:30:51PM -0400, Tim Dunphy wrote:
>> No prob! Thanks for all the help! But in searching my system I don't find
>> anything of the sort.
>>
>> [root at monitor2:~] #updatedb
>> [root at monitor2:~] #locate myzabbix.te
>> [root at monitor2:~] #find / -name "myzabbix.*"
2015 Jun 17
2
selinux allow apache log access
>
> Try something like:
> grep zabbix /var/log/audit/audit.log | audit2allow -M zabbix
> semodule -i zabbix.pp
Thanks for your response! However this is what happens when I try to
install the module:
[root at monitor2:~] #semodule -i zabbix.pp
libsepol.print_missing_requirements: zabbix's global requirements were not
met: type/attribute zabbix_t (No such file or directory).
2015 Jun 17
2
selinux allow apache log access
>
> What turns up in myzabbix.te?
Same deal. :(
#semodule -i myzabbix.te
semodule: Failed on myzabbix.te!
sigh... but thanks any other clues?
On Wed, Jun 17, 2015 at 11:42 AM, Harold Toms <h.toms at qmul.ac.uk> wrote:
> On 17/06/15 16:29, Tim Dunphy wrote:
>
>> That's because there's already a zabbix module loaded (the message isn't
>>> very
2015 Jun 17
2
selinux allow apache log access
>
> Sorry, I didn't put that very clearly. Could you show us the contents of
> myzabbix.te.
No prob! Thanks for all the help! But in searching my system I don't find
anything of the sort.
[root at monitor2:~] #updatedb
[root at monitor2:~] #locate myzabbix.te
[root at monitor2:~] #find / -name "myzabbix.*"
I also did search using 'yum provides' to find
2015 Jun 16
2
selinux allow apache log access
Hey guys,.
I have a centos 7 machine I'm using as a zabbix server. And I noticed that
apache won't start, with this complaint in the error log:
(13)Permission denied: AH00091: httpd: could not open error log file
/var/log/zabbix_error_log.
AH00015: Unable to open logs
I tried having a look at audit2allow and this is the response I get back:
[root at monitor2:/etc/httpd] #grep http
2013 Aug 07
1
Adding Foreman to an existing Puppet master
Greetings:
Sorry for cross-posting this question, but I haven''t gotten any love
over on the Google Forum for Foreman users<https://groups.google.com/forum/#!forum/foreman-users> (their
forum isn''t as active as this one). I only recently learned about The
Foreman and I''d like to deploy it on a 64-bit Ubuntu 12.04 LTS workstation
to provision/manage a bunch of
2011 Oct 18
2
puppet-foreman
Hi,
I created a centOS6 EC2 instance last night and ran the foreman puppet module but it came back with a few years. Was hoping somebody could help me understand these errors.
[root@ip-10-170-77-129 config]# echo include foreman | puppet --modulepath /root/puppet-foreman/
err: /Stage[main]/Foreman::Config::Enc/File[/var/lib/puppet/yaml/foreman]/ensure: change from absent to directory failed:
2015 Jun 17
0
selinux allow apache log access
On 17/06/15 16:29, Tim Dunphy wrote:
>> That's because there's already a zabbix module loaded (the message isn't
>> very informative!). I forgot that the received wisdom is to insert "my" in
>> front of ones own modules i.e.:
>> grep zabbix /var/log/audit/audit.log | audit2allow -M myzabbix
>> semodule -i myzabbix.pp
>
>
> Hmm no luck
2010 Sep 29
3
Foreman barfs on startup.
All,
First attempt at running foreman.
[pax] prov01 /usr/share/foreman/script:# ./server -e production
=> Booting WEBrick
=> Rails 2.3.5 application starting on http://0.0.0.0:3000
/usr/share/foreman/vendor/rails/activesupport/lib/active_support/dependencies.rb:443:in
`old_load_missing_constant'': uninitialized constant Puppet::Rails
(NameError)
from
2009 Nov 26
2
Puppet+Foreman: class into module couldn't apply on nodes
Hello,
I try config puppet with foreman frontend. Into puppetmasterd I create
modules "test" and create init.pp:
# Create "/tmp/testfile" if it doesn''t exist.
class test_class {
file { "/tmp/testfile":
ensure => present,
mode => 644,
owner => root,
group => root
}
}
Configure nodes in site.pp and import
2013 Jul 25
2
No reports in foreman
Dear all
I am trying to set up reports in foreman, but foreman tells me to configure
it.
What am I doing wrong?
I have on the puppet master:
/var/lib/puppet/reports/foreman.rb
with $foreman_url=http://rh6-puppet-master
Do I need the port?
/etc/puppet/puppet.conf with in [main] reports = log, foreman
I restarted the service service puppetmaster restart
in /var/log/messages I find: No
2012 Jul 22
4
Foreman 1.0 released!
Hello,
I''m very excited and pleased to share the release of Foreman 1.0
Since the change log is quite extensive, I would simply refer you to the
change log [1] and would highly suggest to read it if you are upgrading.
About Foreman:
Foreman is an opensource management tool, design to help you to manage your
infrastructure.
Foreman takes over provisioning(bare metal, virtual or in the
2011 Jun 07
1
Foreman 0.3 released
I''m pleased to announce the release of Foreman 0.3
Download from:
Source: http://theforeman.org/attachments/download/237/foreman-0.3.tar.bz2
RPM: http://yum.theforeman.org/stable/RPMS/foreman-0.3-1.noarch.rpm
It is recommended to upgrade your foreman smart proxy to the latest version
as well.
Highlights of this release include:
SearchingAn extensive rewrite of the search system was
2015 May 09
1
Q: respecting .ssh/id_rsa
On 8 May 2015 20:41, "Conley, Matthew M CTR GXM" <
matthew.m.conley1.ctr at navy.mil> wrote:
>
> chmod 0700 .ssh
> chmod 0600 .ssh/*
>
> Keys can fail if you don't have that setup correctly.
> Also do:
> grep sshd /var/log/audit/audit.log| audit2allow -m sshd
> # Will let you see what modules it will create.
> grep sshd /var/log/audit/audit.log|
2011 Dec 08
8
Puppet Dashboard or Forman on SLES?
Hi all,
i planned for a startup to install one of this gui tools. But if i
look in the documentation, or google it, i find no results which
helps.
If i would like to install the rpm package i get the following
dependencies problems
rpm -i puppet-dashboard-1.2.3-1.el6.noarch.rpm
warning: puppet-dashboard-1.2.3-1.el6.noarch.rpm: Header V4 RSA/SHA1
signature: NOKEY, key ID 4bd6ec30
error: Failed
2012 May 10
4
Foreman and default configs for all nodes
I''m having some issues applying a default set of modules to all of my nodes
managed by Foreman. I have around 20 nodes split among 4 environments. I
have a node {default...} stanza in site.pp, but due to the way puppet
handles ENCs, nothing from this is applied to my nodes. I have looked at
host groups in Foreman, but they don''t seem to do what I want, since they
are applied